Fortify and Cigital are getting ready to release a set of best practices that tech companies and other businesses can follow. The authors developed the model by studying the security practices at Google, Microsoft, Adobe, and other tech companies. Successful SSGs, even in regulated industries, always emphasize security education, technical resources, and mentoring rather than policing for security errors and handing out punishments. The final product will be available at this Web site, with details of the study released in the next several months.
Source: https://threatpost.com/can-we-learn-microsoft-and-google-security-030509/72411/